Skip to content

"docker inspect" of control_control_1 container exposes keystone credentials #157

@Vultaire

Description

@Vultaire

During a debug session, we found that doing a "docker inspect" of the control_control_1 container on a contrail-controller juju unit would expose the keystone credentials via the KEYSTONE_AUTH_ADMIN_PASSWORD environment variable.

Could these credentials be supplied in a different way, so as to reduce the chance of accidental leakage?

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type
    No fields configured for issues without a type.

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions